[keycloak-user] Accumulating time skew - JS at 2.2.0.Final

Andy Yar andyyar66 at gmail.com
Wed Sep 21 02:45:20 EDT 2016


Oh, ok. Thanks for your answer.

On Wed, Sep 21, 2016 at 8:21 AM, Stian Thorgersen <sthorger at redhat.com>
wrote:

> See https://issues.jboss.org/browse/KEYCLOAK-3586. The JavaScript adapter
> is broken in 2.2.0.
>
> On 20 September 2016 at 13:06, Andy Yar <andyyar66 at gmail.com> wrote:
>
>> Hello,
>> I've recently faced strange issues having an authed user on JS frontend
>> calling a backend service with bearer token. After a certain number of
>> requests the backend started to return 401. This lasted only for a short
>> period of time and then went back to 200, then 401 again and again.
>>
>> This seemed to me like there was a delta between server time/client time.
>> However, both systems are synced.
>>
>> So I've tried to log the JS Keycloak timeSkew attribute. After a few
>> requests it simply increased itself. After ~40 requests its values rose
>> from 0, through 2, 5, 8, 15 up to 35 seconds! It has never decreased.
>>
>> It seems wrong to me, since documentation mentions it should be a simple
>> delta between client and server time.
>>
>> Am I doing something really wrong here?
>>
>> Thanks
>>
>> _______________________________________________
>> keycloak-user mailing list
>> keycloak-user at lists.jboss.org
>> https://lists.jboss.org/mailman/listinfo/keycloak-user
>>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.jboss.org/pipermail/keycloak-user/attachments/20160921/149804a9/attachment.html 


More information about the keycloak-user mailing list